CVE-2026-43896 jq: Stack Overflow in Recursive Object Merge
Information published. Continue reading CVE-2026-43896 jq: Stack Overflow in Recursive Object Merge
Month: May 2026
CVE-2026-43894 jq: Wild stack write via signed-integer overflow in decNumber D2U() macro
CVE-2026-41257 jq: Signed-int overflow in `stack_reallocate` (jq VM stack)
Information published. Continue reading CVE-2026-41257 jq: Signed-int overflow in `stack_reallocate` (jq VM stack)
Undermining the trust boundary: Investigating a stealthy intrusion through third-party compromise
Microsoft Incident Response investigated an attack operated through legitimate and trusted administrative mechanisms to blend seamlessly into routine operations and remain undetected demonstrating that intrusions have increasingly avoided using noisy exploits, obvious malware, or custom tooling, instead leveraging systems that organizations already trust within their environments.
The post Undermining the trust boundary: Investigating a stealthy intrusion through third-party compromise appeared first on Microsoft Security Blog.
Undermining the trust boundary: Investigating a stealthy intrusion through third-party compromise
Microsoft Incident Response investigated an attack operated through legitimate and trusted administrative mechanisms to blend seamlessly into routine operations and remain undetected demonstrating that intrusions have increasingly avoided using noisy exploits, obvious malware, or custom tooling, instead leveraging systems that organizations already trust within their environments.
The post Undermining the trust boundary: Investigating a stealthy intrusion through third-party compromise appeared first on Microsoft Security Blog.
CVE-2026-32204 Azure Monitor Agent Elevation of Privilege Vulnerability
External control of file name or path in Azure Monitor Agent allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-32204 Azure Monitor Agent Elevation of Privilege Vulnerability
CVE-2026-40365 Microsoft SharePoint Server Remote Code Execution Vulnerability
Insufficient granularity of access control in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. Continue reading CVE-2026-40365 Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2026-42893 Microsoft Outlook for iOS Tampering Vulnerability
Improper neutralization of special elements used in a command (‘command injection’) in M365 Copilot allows an unauthorized attacker to perform tampering over a network. Continue reading CVE-2026-42893 Microsoft Outlook for iOS Tampering Vulnerability